Product · faye

websocket-driver-node

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.3

CVE-2026-54490

websocket-driver: Resource limit bypass via message compression

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if this library is used with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than the configured maximum message…

faye websocket-driver-node node-websocket-driver websocket-driver Debian Ubuntu npm

Jul 17, 2026